CVE-2014-9896: drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devi...

Security readout for executives and security teams

This is an old Android/Qualcomm information disclosure issue affecting Nexus 5 and Nexus 7 (2013) devices before the August 5, 2016 security level. A malicious app could access sensitive information because a Qualcomm driver did not properly validate inputs and return values. Exposure appears limited to Nexus 5 and Nexus 7 (2013) devices with Qualcomm components before 2016-08-05. The bundle does not establish broader OEM, Android fork, or chipset exposure. Treat as a legacy-device hygiene issue unless affected devices remain in production. Priority rises if old Nexus devices handle sensitive data or allow untrusted app installation. Mitigation focus: Verify affected devices are updated to the 2016-08-05 Android security level or later.; Retire or isolate unsupported Nexus 5 and Nexus 7 (2013) devices.; Check Android and vendor guidance for applicable Qualcomm component updates..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.